Lightning Talk: Hiding in Plain Sight - How Flux Decrypts Secrets
Lightningat GitOpsCon Europe 2022 · on Tuesday, 2022-05-17· at 11:05· Pavilion 3 | Room E | Level 2 | Central Forum·
summary
Shows how Flux pulls encrypted YAML from Git, decrypts it and applies real Kubernetes secrets using Flux decrypts and applies secrets. Demonstrates two concrete flows: kubeseal CLI creates SealedSecret and a Seal controller decrypts on-cluster and SOPS with age/GPG or cloud KMS encrypts the data field so Flux can decrypt with the SOPS library. Live-demo notes mention a 10-minute lightning demo and links to repos and docs.
AI-written summary · about
chapters (5)
- 0:00Start
- 2:13Benefits of Managing Secrets with GitOps
- 3:49Sealed Secrets
- 5:26Mozilla SOPs
- 8:20Flux Booth at KubeCon EU 2022!
related talks
38mFlux Security Deep Dive
54mKeeping Kubernetes Secrets
01h 02mSecret Management: The Soft Way
54mKeeping Kubernetes secrets secret
10mLightning Talk: How to Keep a Secret in GitOps, Without Keeping...
30mLook Ma, No secrets in my Kubernetes Cluster! - Vijay Dharap
29mSecuring secrets in the GitOps era
26mSecret Management in Kubernetes: The GitOps Way - Benjamin Ritter